1. Describe your incident:
Upon starting my Graylog server the port (9000) opens and the server logs show it is running however when entering ‘https://hostname:9000’, as well as https://IP:9000’ it returns a blank page only showing scripts in the body when viewed through inspector.
2. Describe your environment:
-
OS Information: Ubuntu 22.04
-
Package Version: Graylog 5.0
-
Service logs, configurations, and environment variables:
journalctl logs show nothing but the server starting and stopping when I start and stop it for debugging.
Server logs:
– Begin Server.log –
2023-07-13T15:52:37.525-05:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[scripting_api_preview=off, search_filter=on]}
2023-07-13T15:52:37.858-05:00 INFO [CmdLineTool] Loaded plugin: Integrations 5.0.8 [org.graylog.integrations.IntegrationsPlugin]
2023-07-13T15:52:37.858-05:00 INFO [CmdLineTool] Loaded plugin: Collector 5.0.8 [org.graylog.plugins.collector.CollectorPlugin]
2023-07-13T15:52:37.859-05:00 INFO [CmdLineTool] Loaded plugin: Threat Intelligence Plugin 5.0.8 [org.graylog.plugins.threatintel.ThreatIntelPlugin]
2023-07-13T15:52:37.859-05:00 INFO [CmdLineTool] Loaded plugin: Elasticsearch 7 Support 5.0.8+4c22532 [org.graylog.storage.elasticsearch7.Elasticsearch7Plugin]
2023-07-13T15:52:37.859-05:00 INFO [CmdLineTool] Loaded plugin: OpenSearch 2 Support 5.0.8+4c22532 [org.graylog.storage.opensearch2.OpenSearch2Plugin]
2023-07-13T15:52:37.877-05:00 INFO [CmdLineTool] Running with JVM arguments: -Xms1g -Xmx1g -XX:+UseG1GC -XX:-OmitStackTraceInFastThrow -Djavax.net.ssl.trustStore=/etc/graylog/graylog.jks -Djdk.tls.acknowledgeCloseNotify=true -Dlog4j2.formatMsgNoLookups=true -Dlog4j.configurationFile=file:///etc/graylog/server/log4j2.xml -Djava.library.path=/usr/share/graylog-server/lib/sigar -Dgraylog2.installation_source=deb
2023-07-13T15:52:38.005-05:00 INFO [client] MongoClient with metadata {“driver”: {“name”: “mongo-java-driver|legacy”, “version”: “4.7.1”}, “os”: {“type”: “Linux”, “name”: “Linux”, “architecture”: “amd64”, “version”: “5.19.0-46-generic”}, “platform”: “Java/Eclipse Adoptium/17.0.6+10”} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=, codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@8a2a6a]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName=‘null’, serverSelector=‘null’, clusterListeners=‘’, serverSelectionTimeout=‘30000 ms’, localThreshold=‘30000 ms’}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=, maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners=‘’, serverMonitorListeners=‘’}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName=‘null’, compressorList=, uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-07-13T15:52:38.009-05:00 INFO [client] MongoClient with metadata {“driver”: {“name”: “mongo-java-driver|legacy”, “version”: “4.7.1”}, “os”: {“type”: “Linux”, “name”: “Linux”, “architecture”: “amd64”, “version”: “5.19.0-46-generic”}, “platform”: “Java/Eclipse Adoptium/17.0.6+10”} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=, codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@8a2a6a]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName=‘null’, serverSelector=‘null’, clusterListeners=‘’, serverSelectionTimeout=‘30000 ms’, localThreshold=‘30000 ms’}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=, maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners=‘’, serverMonitorListeners=‘’}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName=‘null’, compressorList=, uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-07-13T15:52:38.016-05:00 INFO [connection] Opened connection [connectionId{localValue:2, serverValue:30}] to localhost:27017
2023-07-13T15:52:38.016-05:00 INFO [connection] Opened connection [connectionId{localValue:1, serverValue:29}] to localhost:27017
2023-07-13T15:52:38.016-05:00 INFO [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, minWireVersion=0, maxWireVersion=17, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=15312666}
2023-07-13T15:52:38.041-05:00 INFO [connection] Opened connection [connectionId{localValue:3, serverValue:31}] to localhost:27017
2023-07-13T15:52:38.065-05:00 INFO [MongoDBPreflightCheck] Connected to MongoDB version 6.0.7
2023-07-13T15:52:38.416-05:00 INFO [SearchDbPreflightCheck] Connected to (Elastic/Open)Search version Elasticsearch:7.10.2
2023-07-13T15:52:38.483-05:00 INFO [Version] HV000001: Hibernate Validator null
2023-07-13T15:52:39.960-05:00 INFO [InputBufferImpl] Message journal is enabled.
2023-07-13T15:52:39.971-05:00 INFO [NodeId] Node ID: c578242e-6698-4195-83a9-6a92e818e0bf
2023-07-13T15:52:40.073-05:00 INFO [LogManager] Loading logs.
2023-07-13T15:52:40.100-05:00 INFO [LogManager] Logs loading complete.
2023-07-13T15:52:40.103-05:00 INFO [LocalKafkaJournal] Initialized Kafka based journal at /var/lib/graylog-server/journal
2023-07-13T15:52:40.113-05:00 INFO [client] MongoClient with metadata {“driver”: {“name”: “mongo-java-driver|legacy”, “version”: “4.7.1”}, “os”: {“type”: “Linux”, “name”: “Linux”, “architecture”: “amd64”, “version”: “5.19.0-46-generic”}, “platform”: “Java/Eclipse Adoptium/17.0.6+10”} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=, codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@8a2a6a]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName=‘null’, serverSelector=‘null’, clusterListeners=‘’, serverSelectionTimeout=‘30000 ms’, localThreshold=‘30000 ms’}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=, maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners=‘’, serverMonitorListeners=‘’}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName=‘null’, compressorList=, uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-07-13T15:52:40.114-05:00 INFO [connection] Opened connection [connectionId{localValue:5, serverValue:33}] to localhost:27017
2023-07-13T15:52:40.115-05:00 INFO [connection] Opened connection [connectionId{localValue:4, serverValue:32}] to localhost:27017
2023-07-13T15:52:40.115-05:00 INFO [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, minWireVersion=0, maxWireVersion=17, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=4300152}
2023-07-13T15:52:40.116-05:00 INFO [client] MongoClient with metadata {“driver”: {“name”: “mongo-java-driver|legacy”, “version”: “4.7.1”}, “os”: {“type”: “Linux”, “name”: “Linux”, “architecture”: “amd64”, “version”: “5.19.0-46-generic”}, “platform”: “Java/Eclipse Adoptium/17.0.6+10”} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=, codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@8a2a6a]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName=‘null’, serverSelector=‘null’, clusterListeners=‘’, serverSelectionTimeout=‘30000 ms’, localThreshold=‘30000 ms’}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=, maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners=‘’, serverMonitorListeners=‘’}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName=‘null’, compressorList=, uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-07-13T15:52:40.116-05:00 INFO [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-07-13T15:52:40.118-05:00 INFO [connection] Opened connection [connectionId{localValue:6, serverValue:34}] to localhost:27017
2023-07-13T15:52:40.229-05:00 INFO [InputBufferImpl] Initialized InputBufferImpl with ring size <65536> and wait strategy , running 2 parallel message handlers.
2023-07-13T15:52:40.452-05:00 INFO [ElasticsearchVersionProvider] Elasticsearch cluster is running Elasticsearch:7.10.2
2023-07-13T15:52:40.848-05:00 INFO [ProcessBuffer] Initialized ProcessBuffer with ring size <65536> and wait strategy .
2023-07-13T15:52:40.917-05:00 INFO [OutputBuffer] Initialized OutputBuffer with ring size <65536> and wait strategy .
2023-07-13T15:52:41.277-05:00 INFO [ServerBootstrap] Graylog server 5.0.8+4c22532 starting up
2023-07-13T15:52:41.277-05:00 INFO [ServerBootstrap] JRE: Eclipse Adoptium 17.0.6 on Linux 5.19.0-46-generic
2023-07-13T15:52:41.277-05:00 INFO [ServerBootstrap] Deployment: deb
2023-07-13T15:52:41.277-05:00 INFO [ServerBootstrap] OS: Ubuntu 22.04.2 LTS (jammy)
2023-07-13T15:52:41.278-05:00 INFO [ServerBootstrap] Arch: amd64
2023-07-13T15:52:41.286-05:00 INFO [connection] Opened connection [connectionId{localValue:7, serverValue:35}] to localhost:27017
2023-07-13T15:52:41.345-05:00 INFO [ServerBootstrap] Running 48 migrations…
2023-07-13T15:52:41.643-05:00 INFO [PeriodicalsService] Starting 26 periodicals …
2023-07-13T15:52:41.643-05:00 INFO [Periodicals] Starting [org.graylog2.periodical.ThroughputCalculator] periodical in [0s], polling every [1s].
2023-07-13T15:52:41.653-05:00 INFO [Periodicals] Starting [org.graylog.plugins.pipelineprocessor.periodical.LegacyDefaultStreamMigration] periodical, running forever.
2023-07-13T15:52:41.657-05:00 INFO [Periodicals] Starting [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread] periodical in [0s], polling every [1s].
2023-07-13T15:52:41.659-05:00 INFO [LegacyDefaultStreamMigration] Legacy default stream has no connections, no migration needed.
2023-07-13T15:52:41.659-05:00 INFO [Periodicals] Starting [org.graylog2.periodical.ClusterHealthCheckThread] periodical in [120s], polling every [20s].
2023-07-13T15:52:41.665-05:00 INFO [PeriodicalsService] Not starting [org.graylog2.periodical.ContentPackLoaderPeriodical] periodical. Not configured to run on this node.
2023-07-13T15:52:41.665-05:00 INFO [Periodicals] Starting [org.graylog2.periodical.GarbageCollectionWarningThread] periodical, running forever.
2023-07-13T15:52:41.669-05:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexerClusterCheckerThread] periodical in [0s], polling every [30s].
2023-07-13T15:52:41.670-05:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexBlockCheck] periodical in [0s], polling every [30s].
2023-07-13T15:52:41.671-05:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexRetentionThread] periodical in [0s], polling every [300s].
2023-07-13T15:52:41.705-05:00 WARN [LookupTableService] Unable to load data adapter watchlist-mongo of type mongodb, missing a factory. Is a required plugin missing?
2023-07-13T15:52:41.713-05:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexRotationThread] periodical in [0s], polling every [10s].
2023-07-13T15:52:41.726-05:00 INFO [connection] Opened connection [connectionId{localValue:9, serverValue:37}] to localhost:27017
2023-07-13T15:52:41.726-05:00 INFO [connection] Opened connection [connectionId{localValue:8, serverValue:36}] to localhost:27017
2023-07-13T15:52:41.733-05:00 INFO [Periodicals] Starting [org.graylog2.periodical.NodePingThread] periodical in [0s], polling every [1s].
2023-07-13T15:52:41.742-05:00 INFO [Periodicals] Starting [org.graylog2.periodical.VersionCheckThread] periodical in [300s], polling every [1800s].
2023-07-13T15:52:41.752-05:00 INFO [Periodicals] Starting [org.graylog2.periodical.ThrottleStateUpdaterThread] periodical in [1s], polling every [1s].
2023-07-13T15:52:41.760-05:00 INFO [Periodicals] Starting [org.graylog2.events.ClusterEventPeriodical] periodical in [0s], polling every [1s].
2023-07-13T15:52:41.764-05:00 INFO [Periodicals] Starting [org.graylog2.events.ClusterEventCleanupPeriodical] periodical in [0s], polling every [86400s].
2023-07-13T15:52:41.771-05:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexRangesCleanupPeriodical] periodical in [15s], polling every [3600s].
2023-07-13T15:52:41.780-05:00 INFO [Periodicals] Starting [org.graylog2.periodical.TrafficCounterCalculator] periodical in [0s], polling every [1s].
2023-07-13T15:52:41.807-05:00 INFO [LookupTableService] Cache watchlist-cache/6485f06fe4bf2a70b59869dd [@f153ea9] STARTING
2023-07-13T15:52:41.808-05:00 INFO [LookupTableService] Cache watchlist-cache/6485f06fe4bf2a70b59869dd [@f153ea9] RUNNING
2023-07-13T15:52:41.827-05:00 WARN [LookupTableService] Lookup table watchlist is referencing a missing data adapter 6485f06fe4bf2a70b59869db, check if it started properly.
2023-07-13T15:52:41.829-05:00 INFO [Periodicals] Starting [org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical] periodical in [0s], polling every [1s].
2023-07-13T15:52:41.834-05:00 INFO [Periodicals] Starting [org.graylog.scheduler.periodicals.ScheduleTriggerCleanUp] periodical in [120s], polling every [86400s].
2023-07-13T15:52:41.845-05:00 INFO [Periodicals] Starting [org.graylog2.periodical.ESVersionCheckPeriodical] periodical in [0s], polling every [30s].
2023-07-13T15:52:41.879-05:00 INFO [Periodicals] Starting [org.graylog2.periodical.UserSessionTerminationPeriodical] periodical, running forever.
2023-07-13T15:52:41.884-05:00 INFO [Periodicals] Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredSidecarsThread] periodical in [0s], polling every [600s].
2023-07-13T15:52:41.884-05:00 INFO [Periodicals] Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredConfigurationUploads] periodical in [0s], polling every [600s].
2023-07-13T15:52:41.885-05:00 INFO [Periodicals] Starting [org.graylog.plugins.views.search.db.SearchesCleanUpJob] periodical in [3600s], polling every [28800s].
2023-07-13T15:52:41.908-05:00 INFO [Periodicals] Starting [org.graylog.events.periodicals.EventNotificationStatusCleanUp] periodical in [120s], polling every [86400s].
2023-07-13T15:52:41.908-05:00 INFO [Periodicals] Starting [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread] periodical in [0s], polling every [3600s].
2023-07-13T15:52:41.958-05:00 INFO [JerseyService] Enabling CORS for HTTP endpoint
2023-07-13T15:52:42.782-05:00 INFO [NetworkListener] Started listener bound to [192.168.31.244:9000]
2023-07-13T15:52:42.784-05:00 INFO [HttpServer] [HttpServer] Started.
2023-07-13T15:52:42.784-05:00 INFO [JerseyService] Started REST API at <192.168.31.244:9000>
2023-07-13T15:52:42.785-05:00 INFO [ServiceManagerListener] Services are healthy
2023-07-13T15:52:42.785-05:00 INFO [InputSetupService] Triggering launching persisted inputs, node transitioned from Uninitialized [LB:DEAD] to Running [LB:ALIVE]
2023-07-13T15:52:42.786-05:00 INFO [ServerBootstrap] Services started, startup times in ms: {BufferSynchronizerService [RUNNING]=0, UrlWhitelistService [RUNNING]=0, FailureHandlingService [RUNNING]=0, UserSessionTerminationService [RUNNING]=0, InputSetupService [RUNNING]=0, GracefulShutdownService [RUNNING]=1, LocalKafkaMessageQueueWriter [RUNNING]=1, LocalKafkaMessageQueueReader [RUNNING]=1, OutputSetupService [RUNNING]=7, MongoDBProcessingStatusRecorderService [RUNNING]=11, LocalKafkaJournal [RUNNING]=11, EtagService [RUNNING]=13, JobSchedulerService [RUNNING]=23, StreamCacheService [RUNNING]=27, GeoIpDbFileChangeMonitorService [RUNNING]=27, ConfigurationEtagService [RUNNING]=28, PrometheusExporter [RUNNING]=48, LookupTableService [RUNNING]=176, PeriodicalsService [RUNNING]=266, JerseyService [RUNNING]=1142}
2023-07-13T15:52:42.789-05:00 INFO [ServerBootstrap] Graylog server up and running.
2023-07-13T15:52:42.807-05:00 INFO [InputLauncher] Not auto-starting input [GELF TCP/GreyLog Server /648720d7684e1b72a3ed1b61] - desired state is STOPPED
2023-07-13T15:52:42.808-05:00 INFO [InputLauncher] Launching input [GELF UDP/GELF_UDP/64872bfe52489963a11b2f59] - desired state is RUNNING
2023-07-13T15:52:42.813-05:00 INFO [InputStateListener] Input [GELF UDP/64872bfe52489963a11b2f59] is now STARTING
2023-07-13T15:52:42.861-05:00 INFO [InputStateListener] Input [GELF UDP/64872bfe52489963a11b2f59] is now RUNNING
– End Server.log –
- Configuration
– Begin Server.conf –
is_leader = true
node_id_file = /etc/graylog/server/node-id
password_secret = *******
root_username = *******
root_password_sha2 = *******
bin_dir = /usr/share/graylog-server/bin
data_dir = /var/lib/graylog-server
plugin_dir = /usr/share/graylog-server/plugin
http_bind_address = 192.168.31.244:9000
http_publish_uri = https://192.168.31.244:9000/
http_external_uri = https://192.168.31.244:9000/api/
http_enable_cors = true
http_enable_gzip = true
http_max_header_size = 8192
http_thread_pool_size = 64
http_enable_tls = true
http_tls_cert_file = /etc/graylog/server/cert/ *******
http_tls_key_file = /etc/graylog/server/cert/ *******
stream_aware_field_types=false
rotation_strategy = count
elasticsearch_max_docs_per_index = 20000000
elasticsearch_max_number_of_indices = 20
retention_strategy = delete
elasticsearch_shards = 4
elasticsearch_replicas = 0
elasticsearch_index_prefix = graylog
allow_leading_wildcard_searches = false
allow_highlighting = false
elasticsearch_analyzer = standard
output_batch_size = 500
output_flush_interval = 1
output_fault_count_threshold = 5
output_fault_penalty_seconds = 30
processbuffer_processors = 5
outputbuffer_processors = 3
processor_wait_strategy = blocking
ring_size = 65536
inputbuffer_ring_size = 65536
inputbuffer_processors = 2
inputbuffer_wait_strategy = blocking
message_journal_enabled = true
message_journal_dir = /var/lib/graylog-server/journal
lb_recognition_period_seconds = 3
mongodb_uri = mongodb://localhost/graylog
mongodb_max_connections = 1000
– End Server.conf –
3. What steps have you already taken to try and solve the problem?
I have seen similar problems solved by ensuring the http_enable_cors is enabled as well as ensuring that the http_publish_uri is declared, both instances are true in my case but the solutions have not solved my predicament.
I have also tried entering the following into the configuration with no success:
web_listen_uri = https://192.168.31.244:9000/
rest_transport_uri = https://192.168.31.244:9000/api
rest_tls_cert_file = /etc/graylog/server/cert/*******
rest_tls_key_file = /etc/graylog/server/cert/*******
rest_tls_key_password = *******
I attempted to throw the test message from blog 21828
and was met with ‘Connection refused’.
4. How can the community help?
I am wanting to leverage the expertise of those who are more versed in this system than myself, thank you all in advance.
.